MAL-2025-189715 Malicious code in sublimation-archaeoastronomy-browserify-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32b52b1e4bbb964b6534537b4d98d51c9e74683dea1516424471f869c0e5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186993 Malicious code in firebase-selenology-blitz-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189690 Malicious code in string-avior-heliophysics-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7ef6f68451c5fa51ac41295643a67cb2a6c0437ba9c76305c143de6da7c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189152 Malicious code in relay-dagda-sync-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e2fa9140c056d951512eeda4b917c4d77a95617f974d632aeae2f8e5465c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186626 Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7735c92427f6151353c4da7ddb0c7da56e021f0ab2b4758b33e8044419c473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189925 Malicious code in throw-bad-orchestrate-analyze-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7886aafdc1134f17a171cbf56c87c0a322e52665e05ce9712e28c73e51ac95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186152 Malicious code in chromedriver-spica-repository-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a4c64a13ccff013904a32793fb2156d58bed4a7842bf67f3e452e2a8eb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-guga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f3cfb3ea05c3c2bdfba514a76137476045ed9d63cb57dfedffffc9552bf4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba13e4413ff941d8d8c72186cd3a3c705c15d5d11ced632c7e16c2bb42abf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kuu-bofauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671ac42e26ca631bebd6ac8cc3ea966bb11422ea27bb3c80c3d0fe49fd5f0c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololgyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea309b320728b5d1716482a9052ffc23faa3021a61a5bfd9270581ed51c05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-nik-hifdagujbagfah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b6f511e3b558edb49194df62b9279407f3d8ddf440ef7626265cd5eb89027f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182268 Malicious code in hitale-irher-aeswasdwadsafeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a54c8919eab94b4c7992d29e06906de16f81f7798f7dfb3f2c0ed286b9b4def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185019 Malicious code in sonic-koig-tmoerocneamuaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243831f9464c3e4928d32905face4f80ac54e1f07730a2ee50cca1f8a7531f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182220 Malicious code in gociy-ung-ugafuag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ca14b7bc865caf490ddc1408a490a194b5d671857495b29d4e73c13eb27e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182070 Malicious code in flights-tuiga-alukaumabvza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c49fac2cb916ad81a7c51f0922afd20e44899ed9a0d815639ad2fd3f2198b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184339 Malicious code in modiov-kifni-ufbaceuiacx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb81084814a3a38ce459fd2b660ce3bf6273b24a3ff1e241b43f7354c56f5433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184816 Malicious code in poliaoz-aiksgsdfo-ahkodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff1d8308d9ab783ce2631c12d9a0d90e41fdb55b86a45e18338cd00435cad85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...